Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C0AF1844C1AD11EF99D03FAC762E951A.roa
File: C0AF1844C1AD11EF99D03FAC762E951A.roa (raw, json)
Hash identifier: vSfpIw7+zr9ATYvF4ai/VdDBGcLZngiOVtToqOcYDgA=
Subject key identifier: 10:DF:9F:58:FA:ED:F6:1A:A9:25:6E:C3:DA:E6:55:0A:E3:D4:47:C6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01214D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C0AF1844C1AD11EF99D03FAC762E951A.roa
Signing time: Tue 24 Dec 2024 04:15:48 +0000
ROA not before: Tue 24 Dec 2024 04:15:44 +0000
ROA not after: Wed 10 Dec 2025 04:15:44 +0000
asID: 984
IP address blocks: 154.193.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74061 (0x1214d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 04:15:44 2024 GMT
Not After : Dec 10 04:15:44 2025 GMT
Subject: CN=676a3574-cebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6a:58:21:ac:75:78:16:eb:c5:fb:fe:4d:10:
e6:09:1e:54:2e:c0:ea:b1:08:83:21:4f:91:ed:9b:
f9:35:39:b8:6d:49:10:aa:25:51:c6:91:5f:d2:3f:
a0:e0:4e:5c:5f:13:3a:a5:6a:72:66:97:a7:05:92:
21:fb:f3:ed:7f:2f:04:37:ca:d4:94:be:83:86:27:
76:38:07:96:11:52:dd:97:99:d2:44:30:e0:f4:06:
7e:fd:23:ac:ed:77:d2:d5:61:1f:5e:9b:7c:fa:b4:
53:88:a2:25:73:f0:50:93:33:b1:0f:4f:de:0a:bc:
df:96:e3:f7:7b:3d:20:19:0d:65:ec:6f:0f:48:7d:
b4:2c:44:ac:14:a9:6f:86:58:bc:c3:a8:21:01:26:
04:55:28:7b:54:58:86:0a:4e:fb:73:0a:18:ed:ea:
59:5a:bf:c9:f1:f0:68:bb:21:77:8c:d7:88:a5:5c:
48:08:7a:08:ef:0f:a2:19:06:b3:97:a1:31:1a:c5:
0f:cb:5e:d5:7b:de:f6:e7:29:2b:35:c0:e0:42:74:
10:87:ef:5d:ac:05:36:98:89:04:5c:f4:64:ef:da:
46:14:51:d3:42:3c:b6:bd:df:64:e2:a1:ef:3a:dc:
d4:b2:98:af:7e:fa:ba:e7:51:74:29:e9:e4:e7:10:
98:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:DF:9F:58:FA:ED:F6:1A:A9:25:6E:C3:DA:E6:55:0A:E3:D4:47:C6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C0AF1844C1AD11EF99D03FAC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.74.0/24
Signature Algorithm: sha256WithRSAEncryption
86:3a:ba:bc:83:40:95:b5:ba:4d:d8:a5:1e:d8:8d:5a:e2:06:
57:54:e1:96:04:fe:d7:00:22:5b:d1:5f:f0:0c:56:0b:9d:1a:
fa:82:a1:79:37:d1:fa:2d:f0:37:df:19:2e:f2:5f:36:f8:bd:
cc:d1:14:e5:0b:b0:73:a5:88:6a:c1:6e:50:e2:8b:c8:e3:87:
c8:3c:98:2c:1b:e8:d5:ab:88:d0:79:bd:ef:ef:8d:52:48:b1:
20:e4:69:52:62:cb:ca:3d:66:5c:58:4e:54:bd:d1:89:c2:10:
cb:c8:8d:64:b7:89:ee:86:c6:90:e6:2c:a4:e1:34:48:cb:2a:
03:95:59:d9:ed:cd:86:e7:9d:4a:f6:f0:c3:13:d4:25:37:57:
ff:53:fa:5d:90:4e:80:43:f7:44:b1:47:68:a4:1c:3b:b8:ee:
12:4d:0a:b2:92:2a:c0:ea:27:fe:1e:2e:3d:2c:01:9c:83:33:
9a:73:fa:47:56:a3:23:fb:35:50:99:81:ca:9c:45:d6:eb:ba:
53:47:0a:a5:cc:10:68:23:e7:5d:6b:53:00:e8:c1:1f:05:a4:
2d:11:bb:12:6a:b5:b0:26:8a:ed:40:7a:9b:3e:f7:28:46:0b:
4d:80:d2:df:df:71:f7:bb:1d:b4:94:66:ce:40:03:a9:d7:ff:
93:cb:91:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:01:59 2025 by rpki-client